Experience sharing while migrating from 12.0.x to 12.5.1-035

[fthiel92]

Hi there,

Since over 1 year, we are going through many weird issues with WSA S390 running 12.0.x (were migrated fron 11.7).

Around 1000 users, with complex policies.

Decryption problems, OCSP problems, mystic strange behaviors, CPU flirting 100% at every time, ...

Couple of weeks ago, we moved everything to 12.5.1-035 (we were early adopters on that release).

We have to say : what a good release !

With no change on our configuration, user experience has improved significantly.

CPU usage of the boxes lowered down to less that 75% (less that 66% ...).

We still have some open bugs (CSCvv72660) but we can live with them until march (WSA 14.x we hope so ...).

If you have some thoughts about migrating from 12.0.x to 12.5, you should really give a try !

Regards

and stay safe !

/FTH

[balaji.bandi]

12.5.1-035  - was fixed many issues, so worth upgrading.

Depends on environment, if you have HA kind of setup, upgrade 1 at a time to minimise the downtime and risk.

[fthiel92]

I agree. It IS possible to migrate fluently. However, do not forget that your 12.0 config master cannot be pushed as is on a 12.5 setup. In our SMA, we created 2 branches, one for 12.0 appliances and one for 12.5 appliances. We did a quick migration because it was complicated to maintain both 12.0 and 12.5 config masters at the same time.

[balaji.bandi]

Oh i was in impression SMA was already upgrade to 13.X  to meet the 12.X WSA requirement, so you need to Upgrade SMA first to higer Level before you upgrade WSA, make sure you take the config back WSA / SMA out of the box.